Koozali.org: home of the SME Server

Arpwatch and E-mail queue management Contribs

Offline Bud

  • *
  • 487
  • +0/-0
Arpwatch and E-mail queue management Contribs
« on: December 21, 2017, 05:29:01 AM »
guys please help

running sme 92 with Arpwatch and E-Mail queue management contribs installed

i have noticed over 1000 of the following messages in the " List Qmail remote queue " of the E-Mail queue management

=========================

2250705 (17, 17/2250705)
  Return-path: anonymous@myserver.com
  From: Arpwatch@myserver.com
  To: admin@myserver.com
  Subject: flip flop (pc-00058.myserver.com)
  Date: 18 Dec 2017 09:54:34 -0000
  Size: 870 bytes

2245699 (2, 2/2245699)
  Return-path: anonymous@myserver.com
  From: Arpwatch@myserver.com
  To: admin@myserver.com
  Subject: flip flop (pc-00051.myserver.com)
  Date: 18 Dec 2017 05:45:36 -0000
  Size: 882 bytes

========================

1. does this indicate that something is wrong with workstations 192.0.0.51 and 192.0.0.58 ?
2. how do i remove the 1000+ messages in the qmail remote queue as the list is just getting bigger

any help greatly appreciated  :)

Offline ReetP

  • *
  • 3,731
  • +5/-0
Re: Arpwatch and E-mail queue management Contribs
« Reply #1 on: December 21, 2017, 05:56:52 AM »
To manage the messages look in the wiki for qmhandle.

Are the mails being correctly delivered? I presume not?

What is in

/etc/sysconfig/arpwatch

Tell us more about your server setup, history etc.
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline Jean-Philippe Pialasse

  • *
  • 2,762
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: Arpwatch and E-mail queue management Contribs
« Reply #2 on: December 21, 2017, 05:17:42 PM »
From arpwatch man page

Quote
Flip flop
The ethernet address has changed from the most recently seen address to the second most recently seen address. (If either the old or new ethernet address is a DECnet address and it is less than 24 hours, the email version of the report is suppressed.)


If those are in the remote queue this means you have set your admin account to transfer to an external adress. Most likely the smtp provider of your transfer address is rejecting these emails. Check at qmail log to know more. 

Offline Bud

  • *
  • 487
  • +0/-0
Re: Arpwatch and E-mail queue management Contribs
« Reply #3 on: December 22, 2017, 05:10:37 AM »
guys thank you for helping much appreciated

Jean-Philippe Pialasse i think you are correct
how do i remove the 1000+ messages in the qmail remote queue as the list is just getting bigger

sorry for the noob question  :)

Offline ReetP

  • *
  • 3,731
  • +5/-0
Re: Arpwatch and E-mail queue management Contribs
« Reply #4 on: December 22, 2017, 05:13:57 AM »
how do i remove the 1000+ messages in the qmail remote queue as the list is just getting bigger

See my post above:

"To manage the messages look in the wiki for qmhandle."
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline Bud

  • *
  • 487
  • +0/-0
Re: Arpwatch and E-mail queue management Contribs
« Reply #5 on: December 22, 2017, 05:48:28 AM »
ReetP

thanks for the info.

https://wiki.contribs.org/Qmhandle_mail_queue_manager

Stop qmail: sv d /service/qmail
List All Messages: qmHandle -l
Delete All: qmHandle -D
Start qmail: sv u /service/qmail

Thanks again guys  :)
« Last Edit: December 22, 2017, 05:56:53 AM by Bud »